CVEs-PoC/2006/CVE-2006-3791.md

CVE-2006-3791

Description

The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service (daemon termination) via a large keysize or valsize, which causes a crash when the resize function cannot allocate sufficient memory.

POC

Reference

• http://aluigi.altervista.org/adv/ufo2ko-adv.txt
• http://aluigi.altervista.org/adv/ufo2ko-adv.txt
• http://securityreason.com/securityalert/1259
• http://securityreason.com/securityalert/1259

Github

No PoCs found on GitHub currently.